nix-daemon: Pass on the user's $SSH_AUTH_SOCK to the SSH substituter